ESG Reporting Requirements Hit Enterprise Systems

Last Wednesday the European Commission published its proposal on corporate sustainability due diligence. The week before, the Council agreed its negotiating position on the directive that will replace Europe's non-financial reporting rules and extend them from roughly eleven thousand companies to something closer to fifty thousand. Taxonomy disclosures began applying on the first of January. The new international sustainability standards board, created at Glasgow in November, is expected to publish its first exposure drafts within weeks. A climate disclosure rule is expected from the American securities regulator this month, and the United Kingdom's climate-reporting requirements take effect in April. It has been a strange week to write about any of this, because since Thursday there has been only one story, and it has made energy security — not energy transition — the immediate concern of every European government. That reordering is real. It has not repealed a single one of the obligations above. For anyone responsible for enterprise systems, the important shift is easy to miss inside the acronyms. What is being demanded is no longer a narrative report produced once a year by the communications team. It is comparable, assured, tagged numbers, produced on the same timetable as the financial statements, and capable of being re-derived from source documents two years later. That is not a reporting exercise. That is an accounting system, and you do not have one.

Your ledger knows the money; the report needs the quantity

Here is the central problem, stated plainly. Financial systems were built to record value. Sustainability reporting needs volume — kilowatt-hours, litres, kilogrammes, tonne-kilometres, refrigerant charge weights — and nobody ever reconciled the two because no regulation previously required litres. So the numbers are scattered across places your enterprise system touches but does not capture. Electricity and water consumption sit on invoices that are often paid by a landlord or a facilities contractor. Fuel is on card statements and vehicle logs. Air travel is with an agency, in itineraries rather than transactions. Refrigerant top-ups appear on maintenance dockets as a service charge. Waste is a monthly collection fee with a tonnage on a paper docket in a folder at the back gate. Purchased goods are in accounts payable, priced in currency and almost never weighed. Workforce data is in the human resources system, safety incidents are in a spreadsheet, and training records are with whoever ran the training. The first honest deliverable of any readiness exercise is a map: for every metric you will be asked to report, the system or document where the underlying quantity exists today, who owns it, and whether it can be extracted monthly. Most organisations discover that between a third and a half of their required data has no system home at all.

Six changes worth making inside the ERP this year

None of these require a sustainability platform, and all of them are useful regardless of how the regulation settles. Capture quantity on utility and fuel invoices. Add consumption fields, make them mandatory, and validate them against the prior period. An invoice with an amount and no reading is a data loss you cannot recover later. Attach factor-bearing categories to spend. Extend your purchase categories so each one can carry an emission factor, giving you a defensible spend-based estimate as a floor, with a documented upgrade path to activity data for the categories that matter. Extend the supplier master. Country of origin, production site addresses, certifications with expiry dates, and a flag for whether a supplier is itself in scope of reporting. You will be asked, repeatedly, and a supplier record without a site address cannot answer a due-diligence question. Set the organisational boundary where your consolidation lives. Equity share or operational control, entity by entity, joint ventures included, mapped to the same hierarchy finance uses. Two boundaries in one company produces two answers to the same question. Build a site and asset register. Floor area, tenure, meter identifiers, ownership, and which legal entity occupies it. Almost every intensity metric is a quantity divided by a site attribute you currently do not hold. Lock periods. If sustainability data can be edited indefinitely, no auditor can rely on it and no restatement can be explained. Close it the way you close a ledger.

Emission factors are reference data, not constants

This is the requirement that surprises almost everyone, and it is the clearest signal that you are building accounting infrastructure rather than a report. When you restate last year's figures, you must restate them using the factors that were in force when the activity happened — grid intensity, fuel factors, published averages — not the values published this year. That makes emission factors versioned reference data with effective dates, sources and supersession, exactly like tax rates. Every calculated number needs to carry the factor version used to produce it. Organisations that store factors in a spreadsheet cell will be unable to reproduce their own prior-year figures within eighteen months, which is precisely when the assurance provider starts asking.

The honesty budget on Scope 3

Indirect value-chain emissions are where the numbers become estimates, and pretending otherwise is the fastest way to fail an assurance engagement. In practice two or three categories dominate for most businesses — typically purchased goods and services, upstream transport, and business travel. Measure those properly with activity data from the handful of suppliers and providers who cover most of the volume. Estimate the remainder from spend, disclose the method, and state the uncertainty. The failure mode is not estimation. It is precision theatre: a figure carried to three decimal places built on a factor applied to a spend category that includes four unrelated things. Assurance providers are not fooled by decimals, and the number you cannot defend is worse than the range you can.

Practical Guidance for ESG Data Readiness Assessment

• Map every required metric to a source document and a named owner before evaluating any software.
• Make consumption quantities mandatory on utility, fuel and waste invoices from the next billing cycle.
• Store emission factors as versioned reference data with effective dates and sources.
• Fix the reporting boundary once, aligned to your financial consolidation, and document the treatment of joint ventures.
• Extend the supplier master now with origin, sites and certifications, because the questionnaires are already arriving.
• Measure the top two value-chain categories properly and estimate the rest transparently.
• Close and lock sustainability periods monthly, with the same discipline as the ledger.
• Assign one accountable owner for the numbers who is not the person writing the narrative.

The Regional Angle

Three things make this materially different for a group headquartered in the Gulf, and the first is a data problem with a commercial solution. Most regional offices, and a large share of warehouses and retail units, are leased. Electricity is frequently billed through the landlord, and cooling — the dominant load for most of the year — often comes from a district cooling provider and appears as a service charge measured in refrigeration ton-hours, or as an unbroken line in a building's common charges. What arrives is an amount. What you need is consumption, per meter, per month, attributable to your premises. There is no technical fix for this; there is a contractual one. Add meter-level consumption data as a standing requirement in every new lease and every renewal, ask existing landlords and cooling providers for historical readings while the request is still a courtesy, and record the meter identifiers in your site register. Groups that start this at the next renewal cycle will have three years of comparable data by the time a customer asks for it; groups that wait will be estimating from floor area and defending the estimate. The second is that the demand will not arrive solely from European customers. The Emirates has committed to net zero by 2050 and Saudi Arabia to 2060, the securities regulator already requires sustainability reporting from listed companies, and the regional exchanges have issued disclosure guidance. Egypt hosts the climate conference in November and the Emirates hosts it next year, which will turn national commitments into procurement language faster than most boards expect — sovereign-linked buyers and their contractors are the channel through which this becomes a supplier requirement, and they buy from almost everyone. Treating this as a European export problem is the most common regional misdiagnosis. The third concerns the social half of the acronym, which regional groups tend to treat as the easy half and which is in fact where the exposure concentrates. The diversity categories embedded in imported templates map awkwardly onto a workforce that is majority expatriate and organised by nationality rather than by the classifications the template expects. The genuinely material metrics here are labour-condition metrics: whether workers paid recruitment fees, whether accommodation and transport meet standard, whether passports are retained, whether wages are paid on time and in full, whether summer working-hour restrictions are observed, and — critically — whether the people concerned are your employees or a manpower supplier's. Two assets you already have are useful evidence: wage protection system records demonstrate payment timeliness objectively, and the existing midday-break regime is a heat-stress control you can report against. The due diligence proposal published last week points directly at contracted labour in supply chains, so the honest first step is to find out how many people work on your sites under someone else's employment contract. Very few regional groups can answer that today.

The objection worth taking seriously

The strongest objection is that this is compliance cost with no operating return, measuring estimates to a standard that makes assurance largely ceremonial, and that the political durability of the agenda is now genuinely in doubt. A week into a European land war, governments are reopening coal plants and scrambling for liquefied gas; committees that were arguing about taxonomy alignment in January are arguing about supply security in March. Building infrastructure for a standard that has not been finalised, under a directive still in trilogue, ahead of a rule that has not been proposed, is a reasonable definition of wasted capital. Some of that is right. The regime is unstable, the estimates are soft, and anyone selling a platform on the basis of regulatory certainty is overselling. A prudent organisation builds the plumbing and defers the reporting software. But notice what the plumbing consists of: consumption quantities, a site register, supplier origin and site data, a labour-conditions inventory, and versioned reference data. Every one of those is operational information a well-run business should hold irrespective of disclosure rules — and the energy shock of the past week makes the first item more valuable, not less. You cannot manage an energy cost that has doubled if your system records only the amount and never the kilowatt-hours. The reporting requirement is the occasion; the operational visibility is the return. And the requests are arriving through customers, lenders and insurers on their own schedule, entirely independent of whether any particular regulation survives contact with politics.

Common Questions

Do we need a dedicated sustainability platform?

Not yet, and not before the data map exists. Most organisations get further by extending their existing system and consolidating in a controlled spreadsheet for one cycle, then buying with knowledge of their actual requirements.

Spend-based or activity-based emissions data?

Both. Spend-based as a complete floor across all categories, activity-based for the two or three categories that dominate, with the method disclosed for each.

Who should own the numbers?

Finance, with sustainability expertise supporting. The discipline required — boundaries, period locks, reference data, assurance — is accounting discipline, and the reporting calendar is the financial calendar.

What should we expect over the next twelve months?

Expect the international standards board to issue exposure drafts within weeks and consult over the summer, with final standards plausibly by early next year. Expect an American proposal this month and immediate legal challenge to it. Expect European trilogues to conclude during the year, with first reporting falling on the largest companies for financial year 2024. Expect customer and lender questionnaires to move faster than any of it, and to become the operative deadline for most mid-sized businesses. And expect the energy crisis to make consumption data a cost-control priority before it becomes a disclosure obligation — which is, for once, a convenient alignment of motives.

---

ESG Data Readiness Assessment — we map every required metric to a source document, fix the boundary and the reference data, and get consumption quantities into your system before the questionnaires set your deadline.